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In the claims: 



41 . (New) A method to allow at least one party to perfomi at least one pemiitted 
activity that is applicable to a plurality of devices, comprising the steps of: 

embedding a role certificate applicable to the plurality of devices in an 
individual device, wherein the role certificate specifies said at least one permitted 
activity and wherein the role certificate is generated by a Certification Authority (CA); 

embedding at least information regarding a public key applicable to the 
plurality of devices in said individual device, the public key corresponding to the 
private key used by the CA to sign the role certificate; and 

mnning the individual device so as to verify the role certificate using said 
information regarding the CA public key so that said at least one pemiitted activity can 
be activated within the individual device by said at least one party if the role certificate 
is verified. 

42. (New) The method of claim 41, wherein said individual device is also embedded 
with at least one different role certificate. 

43. (New) The method of claim 42, wherein one of the at least one different role 
certificate specifies at least a third party or a group or a device, and wherein the at least 
one permitted activity is not conducted if the one of the at least one different role 
certificate does not match said at least a third party or a group or a device. 

44. (New) An apparatus to allow at least one party to perform at least one permitted 
activity that is applicable to a plurality of devices, comprising: 

means for embedding a role certificate applicable to the plurality of devices in 
an individual device, wherein the role certificate specifies said at least one permitted 
activity and wherein the role certificate is generated by a Certification Authority (CA); 
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means for embedding infomiation regarding a public key applicable to the 
plurality of devices in said individual device, the public key corresponding to the 
private key used by the CA to sign the role certificate; and 

means for running the individual device so as to verify the role certificate using 
said information regarding the CA public key so that said at least one permitted activity 
can be activated within the individual device by said at least one party. 
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